5.5 Data Breach Notification
NIST PIV and digital identity SP 800-63A-4 against SP 800-63A
All changes in this version
All changes in this version
Title changed
Before · SP 800-63A
After · SP 800-63A-4
Data Breach Notification
Control changed
Before · SP 800-63A
After · SP 800-63A-4
In the event of a data breach of CSP records, the CSP SHALL provide notification to subscribers whose personal information may have been exposed to unauthorized access. Such notification SHALL include information about the breach and actions for subscribers to take to recover or maintain access to their accounts and to protect against any unauthorized disclosure of their personal information. The CSP SHALL send such notifications as expeditiously as possible to the subscribers’ validated address.